Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo sampoernaagro.com

Group: lockbit3

Discovered by ransomware.live: 2024-08-30

Estimated attack date: 2024-08-06

Country: ID

Description:

Founded in 1993 and headquartered in South Sumatra, Indonesia, PT Sampoerna Agro Tbk is a palm oil manufacturer. They engage in the production of p...


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 27

Compromised Users: 3

Third Party Employee Credentials: 10


External Attack Surface: 13



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse biznetgio.com
MX Records
  • mxa-008e4202.gslb.pphosted.com.
  • mxb-008e4202.gslb.pphosted.com.
TXT Records
  • xq7B5vF0YYxWvZekKDQeoGjCDuMkPJDuMa3k6W65J6w+i0AJgjfFFdTX7w7TDQF7eJf3
  • duo_sso_verification=oHz1V6yBXkf5OfNexNZ2mIYo9IJ82QPJGD3eGgDx8iGR4cRUsS9Hg73rMMainjWO
  • v=spf1 include:spf.protection.outlook.com include:spf-008e4202.pphosted.com ip4:203.142.81.177 -all
  • MS=ms37045923
  • kngrn0v3dyb4b6r48fs03jc22j69lwzf
Cloud / SaaS Services Detected
Microsoft 365 Cisco Duo Proofpoint

Leak Screenshot:

Leak Screenshot